The rapidly expanding world of open-source AI projects is increasingly becoming a target for malicious actors. OpenClaw, a popular and free autonomous AI agent, is currently at the center of a sophisticated phishing campaign on GitHub, designed to trick its developers and users with fake cryptocurrency rewards and lure them into connecting their digital wallets to fraudulent sites.
Deceptive Phishing Campaign Uncovered
Cybersecurity firm OX Security has brought to light a cunning phishing scam exploiting the visibility of OpenClaw's GitHub presence. Attackers are reportedly creating fake GitHub accounts to post messages on repositories, tagging developers to increase reach. These deceptive posts claim recipients have won $5,000 in "CLAW," an entirely fabricated cryptocurrency supposedly linked to the project. The ultimate goal is to redirect unsuspecting users to a meticulously cloned website resembling the official OpenClaw page, where they are prompted to connect their crypto wallets – a classic maneuver to steal credentials or gain unauthorized access to funds. While OX Security has yet to identify any victims, the campaign underscores a growing threat to popular open-source initiatives.
OpenClaw's Firm Stance and Proactive Warnings
In response to these persistent threats, OpenClaw's creator, Peter Steinberger, has issued unequivocal warnings across platforms like X. He vehemently stated that the project is strictly open-source and non-commercial, and will unequivocally never launch a cryptocurrency token. Steinberger had previously clarified this stance in January, emphasizing that any token claiming affiliation with OpenClaw is a scam. To further safeguard its community and combat the exploitation of its viral popularity, OpenClaw has also taken proactive steps, including banning all discussions related to Bitcoin and other cryptocurrencies on its official Discord channel. These measures highlight the project's commitment to protecting its users from bad actors attempting to capitalize on the success of this innovative AI agent.